Domain > cos.dev-sky.heyblu.ro

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-05-27	3.65.120.62 (ClassC)
2025-08-24	3.77.191.222 (ClassC)
2025-08-27	3.121.123.66 (ClassC)
2025-09-30	3.69.39.115 (ClassC)
2025-10-05	3.77.81.172 (ClassC)
2025-12-11	18.197.131.20 (ClassC)

HTTP/1.1 405 Not AllowedServer: awselb/2.0Date: Sun, 24 Aug 2025 06:17:34 GMTContent-Length: 2105Connection: keep-alivex-amzn-waf-action: captchaCache-Control: no-store, max-age0Content-Type: text/htm

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AGX9rAb3YuQlt4it/FpDqFMAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMyGqQVcV9AZ2QNNKYAgEQgDvzvIoMc4y7E1pzxJSEOsSIf4kTGqqmPb22bdE0vrZdTRb4GVI8XDylHTkMfLeWn6DMOqIhlWzZUjcpIQ,          iv:CgAGzBvEWwAAFctf,          context:lVi0DJo2tHO2Ty1R7iaX6irnl7q4OImpU+etd90j+OS3IkNEDmgVvL+VawojMv2dD0Azq7CCFfySJur3dsIlC4Ez4cNhWgAEgcXwpt9F+obk41LZ9qJ2X06fbFuQQj+Dh/bnKsQ6/3eAfKq+LEc0CRfGu3ZCmW4MzYPgDQedkcPuVHMIl/5RbevbAP393WBJ7oKstpSANNpzWmP7ervLuX0aPEFx1edU8gtIB2p1PSyqy0lZ3HnaBWDDd6gdC3JIlllfiAXVH4533RpOBY1UFU16O3uhFl72rFC5VlFy4ucxaySwUG5aFB1PuP2hXrqSZat5GEZPxNzo5f3vHRGBySK3UL143sXjItcO7/hc6hcpmQ6LDw};    /script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.token.awswaf.com/444e03bc05c2/9d73c3ce45fa/1f2a95a98ae3/challenge.js>/script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.captcha.awswaf.com/444e03bc05c2/9d73c3ce45fa/1f2a95a98ae3/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

Port 443

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AGX9rAb3YuQlt4it/FpDqFMAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMyGqQVcV9AZ2QNNKYAgEQgDvzvIoMc4y7E1pzxJSEOsSIf4kTGqqmPb22bdE0vrZdTRb4GVI8XDylHTkMfLeWn6DMOqIhlWzZUjcpIQ,          iv:CgAEXBvc/wAAAkkm,          context:V9iKOGaLfdk9BMGsdLkqQOgmxS63TffHsWK7eAAn/HTQQiyMcVG5MghDa2CRmqdDV/IPDIHZeDmafkxqCf7alrRezsOsvhlIjgzGGrh0CrpHXRZyx7Vq1dJL137G8QveF4NarHyXVmYUr7hN3hPyAWdt3xRPcQg8yBqpD8fjAJRl1yfPr93uHUcJLk9Uuu3ZNOsp3ufJidBCrroqANyljgNqWJwsgIMgYPS5UTsz5F5XDD07ZYi7/OspYucJxmM4ngBwIKzYAOgg9uj5oIgtohE4qcbM9z4dX5JqF7iuQth3oZ+DdWfS/WlgO9zNcQMyO3PSrte2j9CobCGQKw0LlIfNjpqD7LP7wE/H/nHg4igtBpl81Q};    /script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.token.awswaf.com/444e03bc05c2/9d73c3ce45fa/1f2a95a98ae3/challenge.js>/script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.captcha.awswaf.com/444e03bc05c2/9d73c3ce45fa/1f2a95a98ae3/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

Subdomains

Date	Domain	IP
auth.dev-sky.heyblu.ro	2024-11-24	3.75.45.112
api.dev-sky.heyblu.ro	2024-11-24	52.28.241.83
cos.dev-sky.heyblu.ro	2025-08-24	3.77.191.222
rs.dev-sky.heyblu.ro	2025-09-11	3.121.197.117
mdw.dev-sky.heyblu.ro	2024-11-24	18.157.96.39

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cos.dev-sky.heyblu.ro

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains